Jump to content

Existing user? Sign In
Sign In

Remember me Not recommended on shared computers

Forgot your password?
Staff Sign In
Sign Up

Home

n0ts0l

Members

View Profile See their activity

Posts
4
Joined
April 27
Last visited
May 5

Reputation

0 Neutral

Powershell as exploit after updating PCI Driver

n0ts0l replied to n0ts0l's topic in Windows Malware Removal Help & Support

Sorry for the delayed reply. msert.log
- May 3
- 7 replies
- - malware
  - powershell.exe
  - (and 5 more)
    Tagged with:
    
    malware
    
    powershell.exe
    
    syswow64
    
    exploit
    
    defense evasion
    
    t1055
    
    apt behavior protection
Powershell as exploit after updating PCI Driver

n0ts0l replied to n0ts0l's topic in Windows Malware Removal Help & Support

Here you go. kvrt report.txt
- May 2
- 7 replies
- - malware
  - powershell.exe
  - (and 5 more)
    Tagged with:
    
    malware
    
    powershell.exe
    
    syswow64
    
    exploit
    
    defense evasion
    
    t1055
    
    apt behavior protection
Powershell as exploit after updating PCI Driver

n0ts0l replied to n0ts0l's topic in Windows Malware Removal Help & Support

Okay, thanks. Malwarebytes scan upload 1.txt FRST.txt Addition.txt AdwCleaner[S00].txt
- April 27
- 7 replies
- - malware
  - powershell.exe
  - (and 5 more)
    Tagged with:
    
    malware
    
    powershell.exe
    
    syswow64
    
    exploit
    
    defense evasion
    
    t1055
    
    apt behavior protection
n0ts0l started following Powershell as exploit after updating PCI Driver April 27
Powershell as exploit after updating PCI Driver

n0ts0l posted a topic in Windows Malware Removal Help & Support

I had recently gone into the device manager and noticed the PCI encryption/decryption driver was not installed. I downloaded and ran the AMD software to detect hardware and install the proper drivers for my device. After the successful installation of the drivers, MalwareBytes popped up the notification below. After a restart of the machine, the PCI Encryption/Decryption Driver is no longer in Device Manager and I am curious if it was actual malware or not?
- April 27
- 7 replies
- - malware
  - powershell.exe
  - (and 5 more)
    Tagged with:
    
    malware
    
    powershell.exe
    
    syswow64
    
    exploit
    
    defense evasion
    
    t1055
    
    apt behavior protection

×

×

Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.

IPS spam blocked by CleanTalk.